Merge pull request #1409 from superhacker777/patch-2

XSRFFormHtml() should also generate XSRF token.
2015-10-28 15:54:07 +08:00 · 2015-10-28 15:54:07 +08:00 · 58ed1436cc
commit 58ed1436cc
parent 912abe3272 5d18a7466c
1 changed files with 2 additions and 2 deletions
--- a/controller.go
+++ b/controller.go
@ -647,8 +647,8 @@ func (c *Controller) CheckXSRFCookie() bool {

 // XSRFFormHTML writes an input field contains xsrf token value.
 func (c *Controller) XSRFFormHTML() string {
-	return "<input type=\"hidden\" name=\"_xsrf\" value=\"" +
-		c._xsrfToken + "\"/>"
+	return `<input type="hidden" name="_xsrf" value="` +
+		c.XSRFToken() + `" />`
 }

 // GetControllerAndAction gets the executing controller name and action name.